Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-20079, a CVSS 10.0 authentication bypass in Cisco Secure Firewall Management Center, was confirmed exploited six months after its original disclosure.
Fortinet FortiSandbox, built to detonate suspicious files safely, had two command injection vulnerabilities confirmed exploited on the same day in July 2026.
Four Joomla extensions from unrelated developers had unauthenticated file upload vulnerabilities confirmed exploited within a three-day window in July 2026, every one scoring CVSS 9.8.
MikroTik RouterOS had two vulnerabilities confirmed exploited on the same day in September 2026, both cases of the router extending trust before verification actually completed.
PaperCut MF/NG, previously exploited at scale by ransomware affiliates in 2023, had two more vulnerabilities confirmed exploited on the same day in 2026 — an access control failure and unsafe class loading.
TrueConf Server's on-premises videoconferencing had two vulnerabilities confirmed exploited on the same day in August 2026, both reachable through a single named TCP port.
Citrix NetScaler ADC and Gateway had two CVSS 9.8 vulnerabilities confirmed exploited in quick succession — a memory overflow and an authentication bypass. Why edge infrastructure keeps accumulating unpatched critical bugs.
Microsoft SharePoint had five vulnerabilities confirmed exploited between July and August 2026, three of them the same root cause: deserialization of untrusted data. One carries CISA's confirmed ransomware flag.
SonicWall's SMA1000 VPN appliance had four vulnerabilities confirmed exploited in 2026, two of them flagged by CISA for confirmed ransomware use. The same two bug classes, in the same two interfaces, twice.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
